For context, see this submission: <a href="https://news.ycombinator.com/item?id=38727987">https://news.ycombinator.com/item?id=38727987</a><p>Commercial vendors had a 6 months window (and bounties), while open source developers learned about it <i>after</i> the talk was accepted. See <a href="https://zombofant.net/@jssfr/111618969359339789" rel="nofollow noreferrer">https://zombofant.net/@jssfr/111618969359339789</a> for other community reactions.